Privacy Policy

Effective Date: December 21, 2025

This Privacy Policy describes how Sherri Kozubal (“we,”; “us,'“; or “our”;) collects, uses, stores, protects, and discloses personal information obtained through the website www.sherrikozubal.com (the “Website”) and through online, phone, and remote sessions related to Medical Intuitive services and Hypnotherapy.

By accessing this Website or engaging in services with Sherri Kozubal, you consent to the practices described in this Privacy Policy.

1. Who We Are

 Business Name: Sherri Kozubal

 Business Location: British Columbia, Canada

 Website: www.sherrikozubal.com

 Service Provider: All services are provided solely by Sherri Kozubal

 Services Offered: Medical Intuition services and Hypnotherapy services offered online and remotely

 Nature of Services: Non-medical, non-diagnostic, non-therapeutic, educational and self-development focused

 Website Server Location: United States

Nothing on this Website or in services constitutes medical advice, mental health treatment, diagnosis, psychotherapy, or establishes a regulated healthcare relationship.

2. Information We Collect

We may collect the following categories of personal information:

a. Personal Identifying Information

 Name

 Email address

 Phone number

 Country or region of residence

 Payment-related contact details (note: payment processing is handled by third-party providers; we do not store full payment card details)

b. Health and Wellness Information

 Information voluntarily provided by you related to physical, emotional, or mental well-being

 Intake forms, session notes, consent forms, and session-related communications

c. Technical and Usage Information

 IP address

 Browser type and version

 Device information

 Pages visited and time spent on the Website

3. How Information Is Collected

Information is collected when you:

 Visit or interact with the Website

 Complete contact forms or intake forms

 Book or participate in online or phone sessions

 Communicate via email, phone, or virtual platforms

 Voluntarily provide information during sessions

4. Purpose of Information Collection

Your information is collected and used solely in alignment with the Terms & Conditions and Consent Forms governing services provided by Sherri Kozubal, for the following purposes:

 To provide, administer, and document Medical Intuitive and Hypnotherapy services

 To schedule, conduct, and manage online and phone sessions

 To communicate with you regarding services, appointments, and inquiries

 To maintain professional client records, consent documentation, and session notes

 To comply with legal, regulatory, ethical, and insurance obligations

 To protect the personal safety of clients and others, including individuals under the age of 18

 To maintain the integrity, security, and functionality of the Website

5. Health Information & HIPAA-Standard Data Protection

Although services provided are not medical treatment, all client records and health-related information are treated in accordance with HIPAA-standard data protection practices, as well as applicable international privacy regulations, including PIPEDA (Canada) and GDPR (European Union), including:

 Secure digital storage

 Restricted access to authorized parties only

 Use of encryption, passwords, and other reasonable safeguards

All records are maintained entirely in digital format. No paper files are kept.

6. Data Storage, Cross-Border Transfers, and International Compliance

 Website data may be stored on servers located in the United States.

 The service provider is located in Canada.

 By using the Website and services, you acknowledge and consent to the cross-border transfer, storage, and processing of your information in the United States and Canada in accordance with PIPEDA, GDPR, and other applicable international data protection laws.

Your information may be subject to the laws of these jurisdictions.

7. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information. Information may be shared only in the following circumstances:

 With trusted third-party service providers (e.g., scheduling platforms, secure storage, payment processors) strictly as necessary to operate the Website and services

 When required by law, court order, or legal process

 When there is a reasonable concern for your personal safety or the safety of others, including children or individuals under the age of 18

 With your explicit written consent

8. Confidentiality of Sessions

All sessions are treated as confidential and handled in alignment with the Terms & Conditions, Consent & Release Forms, and applicable law. Information shared during Medical Intuition or Hypnotherapy sessions is not disclosed except as outlined in this Privacy Policy, required by law, or where there is reasonable concern for personal safety or the safety of others, including minors.

All sessions are treated as confidential. Information shared during Medical Intuitive or Hypnotherapy sessions will not be disclosed except as outlined in this Privacy Policy or as required by law.

9. Cookies and Tracking Technologies

The Website may use cookies or similar technologies solely to support functionality, analytics, and security. Cookies are not used to profile users for marketing or automated decision-making.

The Website may use cookies or similar technologies to:

 Enhance user experience

 Analyze Website traffic

 Maintain Website functionality

You may adjust your browser settings to refuse cookies; however, some Website features may not function properly.

10. Data Retention

Personal information is retained in accordance with the most stringent applicable international standards, including GDPR data minimization principles.

 Client records and session documentation are retained for a minimum of 7 years following the last date of service, or longer where required by law or professional standards

 Records relating to minors are retained for 7 years after the individual reaches the age of majority, or longer if legally required

 Website and technical data are retained only as long as necessary for operational and security purposes

When retention periods expire, information is securely deleted, anonymized, or permanently destroyed using industry-standard methods.

11. Your Privacy Rights (PIPEDA & GDPR)

In accordance with PIPEDA (Canada) and GDPR (EU), and depending on your jurisdiction, you have the right to:

 Request access to your personal information

 Request correction of inaccurate or incomplete information

 Request deletion of your personal data, subject to legal, ethical, and professional retention obligations

 Request restriction or limitation of processing where applicable

 Withdraw consent at any time (where processing is based on consent)

 Request data portability where required under GDPR

 Lodge a complaint with a relevant privacy or data protection authority

Requests may be submitted using the contact information provided in this Privacy Policy.

12. GDPR Lawful Basis for Processing

For individuals located in the European Union or United Kingdom, personal data is processed under one or more of the following lawful bases as defined by Article 6 of the GDPR:

 Consent: You have given explicit consent through intake forms, consent agreements, or direct communication

 Contractual Necessity: Processing is necessary to perform services requested by you

 Legal Obligation: Processing is required to comply with applicable laws or regulations

 Vital Interests: Processing is necessary to protect your vital interests or the safety of another person

 Legitimate Interests: Processing is necessary for professional record-keeping, service integrity, fraud prevention, and Website security, provided such interests do not override your fundamental rights and freedoms

Where special category data (including health-related information) is processed, it is done in accordance with Article 9(2) of the GDPR, including explicit consent and purposes related to health and wellness services.

12. Third-Party Links

The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. You are encouraged to review their privacy policies separately.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting on the Website. The updated date will be reflected at the top of this document.

14. Contact Information

Data Controller: Sherri Kozubal

If you have questions or concerns about this Privacy Policy or how your information is handled, please contact: Sherri Kozubal

Website: www.sherrikozubal.com

Email: sherrikozubal@gmail.com

This Privacy Policy is intended to align with the Terms & Conditions and Consent Forms governing Medical Intuitive and Hypnotherapy services provided by Sherri Kozubal and does not constitute legal advice. You are encouraged to consult a qualified legal professional to ensure compliance with applicable laws in your jurisdiction.